Cookie Policy

Centre for Acceleration of Social Technology (CAST)

Worthwhile Chat Service

Effective Date: 7 January 2026

Last Updated: 7 January 2026

Version: 1.0

1. Introduction

This Cookie Policy explains how the Centre for Acceleration of Social Technology (“CAST”, “we”, “us”, or “our”) uses cookies and similar tracking technologies on our Worthwhile Chat Service (the “Service”). This policy should be read in conjunction with our Privacy Policy and Terms of Use.

Cookies are small text files that are placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences, enabling functionality, and helping us understand how our Service is used.

This policy complies with the Privacy and Electronic Communications Regulations 2003 (PECR), the UK General Data Protection Regulation (UK GDPR), and the Data Protection Act 2018.

2. What Are Cookies and Similar Technologies

2.1 Cookies

Cookies are small text files containing a string of characters that are downloaded to your device when you visit a website. They allow the website to recognise your device and store information about your preferences or past actions.

Types of Cookies by Duration:

  • Session Cookies: Temporary cookies that are deleted when you close your browser
  • Persistent Cookies: Cookies that remain on your device for a set period or until you delete them

Types of Cookies by Origin:

  • First-Party Cookies: Set by our website directly
  • Third-Party Cookies: Set by external services we use (e.g., analytics providers)

2.2 Similar Technologies

We may also use similar technologies that function like cookies:

Local Storage: Browser storage that persists longer than session cookies and can store larger amounts of data.

Session Storage: Browser storage that is cleared when the browser tab is closed.

Web Beacons: Small transparent images used to track user behaviour and measure the effectiveness of our Service.

Fingerprinting: Techniques that collect information about your device configuration to create a unique identifier.

3. How We Use Cookies

3.1 Strictly Necessary Cookies

These cookies are essential for our Service to function properly and cannot be disabled without affecting functionality. They do not require your consent under PECR as they are necessary for the service you have requested.

Cookie Name / Purpose / Duration / Domain / Type

  • ‍_cfuvid / Set by Cloudflare to distinguish individual visitors sharing the same IP address, for rate limiting and bot protection / Session / .www.worthwhileai.org / HTTP

Legal Basis: These cookies are necessary for the performance of our contract with you to provide the AI chat service.

3.2 Performance and Analytics Cookies

These cookies help us understand how visitors interact with our Service by collecting and reporting information anonymously. We only use these cookies with your explicit consent.

Cookie Name / Purpose / Duration / Domain / Type

  • _plausible_prod / Set by Plausible Analytics to collect anonymous website usage statistics / 1 year / .plausible.io / HTTP
  • ajs_anonymous_id / Set by Segment (via Webflow) to assign a unique anonymous identifier to each visitor for analytics purposes / 1 year / .worthwhileai.org / HTTP
  • ajs_user_id / Set by Segment (via Webflow) to store a user identifier once recognised, linking browsing activity to a known user1 year / .worthwhileai.org / HTTP

What We Learn:

  • Which pages are most popular
  • How long users spend on different sections
  • Common user journeys through the Service
  • Technical performance metrics
  • Error rates and common issues

Legal Basis: Consent (Article 6(1)(a) UK GDPR and Regulation 6(1)(a) PECR)

3.3 Functional Cookies

These cookies enable enhanced functionality and personalisation features. They may be set by us or by third-party providers whose services we use.

Legal Basis: Consent (Article 6(1)(a) UK GDPR and Regulation 6(1)(a) PECR)

3.4 Third-Party Service Cookies

We use various third-party services that may set their own cookies. These services have their own privacy policies and cookie practices.

Google Analytics:

Content Delivery Network (CDN):

  • Purpose: Faster content delivery and improved performance
  • Cookies: May include caching and performance optimisation cookies
  • Duration: Varies by provider

Security Services:

  • Purpose: Protection against malicious activity and DDoS attacks
  • Cookies: May include challenge verification and threat detection cookies
  • Duration: Typically session-based or short-term

4. Cookie Consent Management

4.1 Consent Banner

When you first visit our Service, you will see a cookie consent banner that explains our use of cookies and provides options to:

  • Accept all cookies
  • Accept only essential cookies
  • Customise your cookie preferences
  • Access our full Cookie Policy

4.2 Cookie Preference Centre

You can manage your cookie preferences at any time through our Cookie Preference Centre, accessible via:

  • The initial consent banner
  • A “Cookie Settings” link in our website footer

Available Options:

  • Essential Cookies: Always active (cannot be disabled)
  • Performance Cookies: Toggle on/off
  • Functional Cookies: Toggle on/off
  • Third-Party Cookies: Toggle on/off by category

4.3 Consent Records

We maintain records of your consent choices, including:

  • Date and time of consent
  • Version of Cookie Policy accepted
  • Specific categories of cookies consented to
  • Method of consent (banner, preference centre, etc.)
  • IP address and user agent (for verification purposes)

These records are kept for 3 years to demonstrate compliance with legal requirements.

4.4 Withdrawing Consent

You can withdraw your consent at any time by:

  • Visiting our Cookie Preference Centre
  • Contacting us at dataprotection@wearecast.org.uk
  • Using browser settings to delete cookies
  • Using browser settings to block future cookies

Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.

5. Managing Cookies in Your Browser

5.1 Browser Settings

All modern browsers allow you to control cookies through their settings. You can:

  • Block all cookies
  • Block third-party cookies only
  • Delete existing cookies
  • Set preferences for specific websites

Browser-Specific Instructions:

Google Chrome: 1. Click the three dots menu → Settings 2. Privacy and security → Cookies and other site data 3. Choose your preferred settings

Mozilla Firefox: 1. Click the menu button → Settings 2. Privacy & Security → Cookies and Site Data 3. Manage your preferences

Safari: 1. Safari menu → Preferences 2. Privacy tab → Manage Website Data 3. Configure cookie settings

Microsoft Edge: 1. Three dots menu → Settings 2. Cookies and site permissions → Cookies and site data 3. Adjust your preferences

5.2 Impact of Blocking Cookies

Essential Cookies: Blocking essential cookies will prevent our Service from functioning properly. You may experience:

  • Inability to maintain login sessions
  • Loss of conversation context
  • Security vulnerabilities
  • Reduced functionality

Non-Essential Cookies: Blocking non-essential cookies will not affect core functionality but may result in:

  • Less personalised experience
  • Inability to remember preferences
  • Limited analytics for service improvement
  • Reduced ability to troubleshoot issues

5.3 Mobile Devices

iOS (Safari): Settings → Safari → Privacy & Security → Block All Cookies

Android (Chrome): Chrome app → Three dots menu → Settings → Site settings → Cookies

Other Mobile Browsers: Consult your browser’s help documentation for specific instructions.

6. Third-Party Cookie Policies

6.1 Google Analytics

Google Analytics helps us understand how users interact with our Service through anonymised data collection.

Data Collected:

  • Page views and user sessions
  • Traffic sources and referrals
  • Device and browser information
  • Geographic location (country/city level)
  • User behaviour patterns

Privacy Controls:

  • IP anonymisation enabled
  • Data retention set to 26 months
  • Data sharing with Google disabled
  • Advertising features disabled

User Controls:

  • Google Analytics Opt-out Browser Add-on
  • Browser cookie settings
  • Our cookie preference centre

Google’s Privacy Policy: https://policies.google.com/privacy

6.2 Content Delivery Networks

We use CDN services to improve the performance and reliability of our Service.

Typical CDN Cookies:

  • Cache optimisation cookies
  • Geographic routing cookies
  • Performance monitoring cookies

Data Processing:

  • Technical data only (no personal content)
  • Temporary storage for performance
  • Automatic deletion based on cache policies

6.3 Security Services

We employ security services to protect against malicious activity.

Security Cookies May Include:

  • Challenge verification tokens
  • Rate limiting identifiers
  • Threat detection markers
  • Geographic access controls

Purpose:

  • Prevent automated attacks
  • Detect suspicious behaviour
  • Protect user data and privacy
  • Maintain service availability

7. International Data Transfers

7.1 Cookie Data Transfers

Some of our third-party cookie providers may transfer data outside the UK. We ensure appropriate safeguards are in place:

Google Analytics:

  • Data may be processed in the United States
  • Protected by Google’s compliance with data protection frameworks
  • Standard Contractual Clauses in place

CDN Providers:

  • Global network of servers for performance
  • Data processing agreements include transfer safeguards
  • Minimal personal data in CDN cookies

7.2 Transfer Safeguards

All international transfers of cookie data are protected by:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions where applicable
  • Additional security measures
  • Regular compliance assessments

8. Data Retention for Cookie Information

8.1 Cookie Lifespan

Different cookies have different lifespans based on their purpose:

  • Session Cookies: Deleted when you close your browser
  • Short-term Cookies: 1 hour to 7 days for security and performance
  • Medium-term Cookies: 30 days to 6 months for functionality
  • Long-term Cookies: 1-2 years for preferences and analytics

8.2 Consent Records

We retain records of your cookie consent for 3 years after your last interaction with our Service. This includes:

  • Consent timestamps
  • Cookie categories accepted/rejected
  • Consent method and version
  • Associated IP address and user agent

8.3 Analytics Data

Analytics data collected through cookies is retained according to our data retention policy:

  • Raw analytics data: 26 months
  • Aggregated reports: Indefinitely (anonymised)
  • User-level data: Deleted after retention period

9. Children’s Privacy and Cookies

9.1 Age Restrictions

Our Service is not intended for children under 13. We do not knowingly set cookies on devices used by children under 13.

9.2 Parental Controls

Parents and guardians can:

  • Use browser parental controls to manage cookies
  • Monitor their children’s online activity
  • Contact us if they believe their child’s data has been collected

9.3 Educational Use

If our Service is used in educational settings with users under 16, we recommend:

  • Obtaining appropriate consent from parents/guardians
  • Using privacy-focused browser settings
  • Limiting non-essential cookie categories

10. Updates to This Cookie Policy

10.1 Policy Changes

We may update this Cookie Policy to reflect:

  • Changes in our cookie usage
  • New third-party services
  • Legal or regulatory requirements
  • Technological developments

10.2 Notification of Changes

Material Changes:

  • Email notification to users who have provided contact information
  • Prominent notice on our website
  • Updated consent banner highlighting changes

Minor Changes:

  • Updated “Last Modified” date
  • Notice in our website footer
  • Inclusion in regular communications

10.3 Continued Consent

Your continued use of our Service after policy updates constitutes acceptance of the changes, unless the changes require new consent under applicable law.

11. Contact Information

11.1 Cookie-Related Enquiries

For questions about our use of cookies or this Cookie Policy:

11.2 Technical Support

For technical issues related to cookie settings or functionality:

Email: support@wearecast.org.uk

Response Time: 2 working days

11.3 Complaints

If you have concerns about our cookie practices:

Internal: dataprotection@wearecast.org.uk

External:

  • Information Commissioner’s Office (ICO)
  • Website: ico.org.uk
  • Phone: 0303 123 1113

12. Legal Framework

12.1 Applicable Laws

This Cookie Policy complies with:

  • Privacy and Electronic Communications Regulations 2003 (PECR)
  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • Electronic Commerce Regulations 2002

12.2 Regulatory Guidance

We follow guidance from:

  • Information Commissioner’s Office (ICO)
  • European Data Protection Board (EDPB)
  • Department for Digital, Culture, Media & Sport (DCMS)

12.3 Industry Standards

Our cookie practices align with:

  • IAB Europe Transparency & Consent Framework
  • W3C Privacy Interest Group recommendations
  • ISO/IEC 27001 information security standards

Document Control

  • Document Owner: Data Protection Officer, CAST
  • Review Frequency: Annual or as required by changes in cookie usage
  • Next Review Date: January 2026
  • Approval: Data Protection Officer and Legal Team
  • Distribution: Public (website), Staff (internal systems)

This Cookie Policy is effective as of the date stated above. For the most current version, please visit our website or contact us using the information provided above.